CVE-2026-62442

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:45+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71045

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:22+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60757

creationtimestamp| type| source ---|---|--- 2026-08-19 18:16:00+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60791

creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71116

creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:43+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-60766

creationtimestamp| type| source ---|---|--- 2026-08-19 18:15:34+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-72530

creationtimestamp| type| source ---|---|--- 2026-08-19 18:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthcttatjf27 2026-08-19 18:11:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthdegbfxg2m 2026-08-19 23:00:05+00:00| seen|...

CVE-2026-69159

Removed by vendor...

CVE-2026-63633

FreeRDP prior to 3.28.0 contains a heap buffer overflow in freerdp_dsp_decode_opus (libfreerdp/codec/dsp.c). The function calls Stream_EnsureRemainingCapacity on context->common.buffer, but opus_decode actually writes decoded PCM into the caller-supplied out stream. A malicious RDP server that...

CVE-2026-63633 FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, freerdpdspdecodeopus in libfreerdp/codec/dsp.c calls StreamEnsureRemainingCapacity on context-common.buffer even though opusdecode writes decoded PCM into the caller-supplied out stream. A malicious RDP server that...

CVE-2026-61281

creationtimestamp| type| source ---|---|--- 2026-08-19 17:52:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70821

creationtimestamp| type| source ---|---|--- 2026-08-19 17:51:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-55194 FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...

CVE-2026-70959

creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:49+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70952

creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70951

creationtimestamp| type| source ---|---|--- 2026-08-19 17:49:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-70898

creationtimestamp| type| source ---|---|--- 2026-08-19 17:45:30+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-72399

A flaw was found in the Linux kernel's enetc network driver. This vulnerability occurs in the eXpress Data Path XDP frame processing, where the driver fails to properly check the number of fragments in an XDP frame against the allocated buffer size. A remote attacker could exploit this...

CVE-2026-62682

Orval (OpenAPI client generator) versions before 8.21.0 emit an unescaped backtick from servers[0].url into generated template literals in packages/core/src/getters/route.ts (getFullRoute), allowing attacker-controlled JS execution when the generated client is invoked; fixed in 8.21.0. No exploit...

CVE-2026-62682 Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, an unescaped backtick in servers0.url is emitted into request URL template literals generated when output.baseUrl.getBaseUrlFromSpecification is enabled without safe encoding...